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IN THE CLAIMS 

Please amend the claims as follows: 

1 . (Currently Amended) A computerized system for providing subscriber control of 
network parameters comprising: 

a service processing switch having a plurality of network resources allocatable to one or 
more virtual routers, wherein differing subsets of the virtual routers are allocatable to each of a 
plurality of subscribing enterprises; 

a service provider management server communicably coupled to the service processing 
switch and operable to configure the plurality of network resources, said configuration including 
an allocation of a subset of the network resources to a subscribing enterprise of the plurality of 
subscribing enterprises; 

a subscriber management server communicably coupled to the service provider 
management system and operable to further configure the subset of the network resources; and 

a subscriber management client communicably coupled to the subscriber management 
server, said client operable to issue configuration requests to the subscriber management server. 

2. (Currently Amended) A computerized method for configuring network resources, the 
method comprising: 

allocating by a service provider a subset of network processing resources to one or more 
virtual routers: 

allocating at least one of the virtual routers to a subscribing enterprise; 

receiving by a subscriber management system a configuration request related to the 
subset of network processing resources allocated to the at least one virtual router from a user 
within the subscribing enterprise; 

forwarding the request to a service provider management server; and 

processing the request by the service provider management system. 
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3. (Previously Presented) The system of claim 1, wherein the plurality of network resources 
includes a packet filter. 

4. (Previously Presented) The system of claim 1, wherein the plurality of network resources 
includes a firewall. 

5. (Previously Presented) The system of claim 1, wherein the plurality of network resources 
includes a network address translation module. 

6. (Canceled) 

7. (Previously Presented) The system of claim 1, wherein the plurality of network resources 
includes a virtual private network (VPN). 

8. (Previously Presented) The system of claim 1, wherein the plurality of network resources 
includes one or more processing elements. 

9. (Previously Presented) The method of claim 2, wherein the subset of network processing 
resources includes a packet filter. 

10. (Previously Presented) The method of claim 2, wherein the subset of network processing 
resources includes a firewall. 

1 1 . (Previously Presented) The method of claim 2, wherein the subset of network processing 
resources includes a network address translation module. 

12. (Canceled) 

13. (Previously Presented) The method of claim 2, wherein the subset of network processing 
resources includes one or more processing elements. 



